How to add F5 vendor specific Radius attirbutes to Windows 2008 NPS to authorize external users to different roles

I am running bigip 11.4.1 on a 3900 that is licensed for LTM and ASM with client authentication. I am able to configure user authentication to a Windows NPS radius server and have all external users ...